Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b3ba417261016b801773caef490c0ccf1c575fc.cer
File:                     8b3ba417261016b801773caef490c0ccf1c575fc.cer (raw, json)
Hash identifier:          Wr20Idqcu18tkZVxEwtwMB65vtU27XUyxFLLKIdWax0=
Subject key identifier:   12:3A:30:F9:B6:01:8B:36:C3:6A:B3:5E:9A:21:46:60:65:27:79:64
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C7558
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d415ca9-37f8-42a9-8935-e200e9c8eb3b/8b3ba417261016b801773caef490c0ccf1c575fc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d415ca9-37f8-42a9-8935-e200e9c8eb3b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 19:17:20 +0000
Certificate not after:    Sun 24 Aug 2025 20:18:02 +0000
Subordinate resources:    AS: 270231
                          IP: 2801:c4:a9::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17593688 (0x10c7558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  1 19:17:20 2024 GMT
            Not After : Aug 24 20:18:02 2025 GMT
        Subject: CN=8b3ba417261016b801773caef490c0ccf1c575fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:2d:dc:90:5f:b8:87:19:fa:1d:cd:7d:45:
                    bb:97:6e:5a:cd:3c:e4:22:89:ca:d4:ea:25:e4:11:
                    c3:5d:c4:c9:c1:6a:3a:3b:94:b5:e9:87:12:3a:69:
                    1f:aa:97:7b:52:83:f8:5c:03:34:2b:e6:87:66:da:
                    52:f6:93:32:b7:b6:22:b2:cf:3a:ca:f5:78:6e:a0:
                    b0:76:43:0b:10:db:d1:4b:2c:07:08:65:db:b9:f5:
                    1d:a8:90:f0:71:d1:84:f5:19:69:bf:a8:16:3d:07:
                    90:d1:95:1f:cb:04:e5:9b:ec:4f:d0:28:3d:b1:96:
                    94:53:af:55:f1:2f:9c:b0:7e:98:a4:ba:ed:5e:e0:
                    18:49:20:25:df:a4:f1:5d:ef:bb:88:fc:28:23:c0:
                    de:8a:88:14:41:01:cd:01:5f:e2:25:e9:be:80:61:
                    dc:86:97:47:1b:c1:1e:87:4d:81:dc:5a:76:64:77:
                    0b:d4:6c:97:e2:f6:a3:02:80:84:59:b2:58:0c:48:
                    9c:84:24:5c:f5:41:87:a9:1a:de:13:92:d8:9d:44:
                    97:a2:37:fb:82:42:d4:74:fd:23:8d:a7:45:aa:92:
                    c7:73:12:3d:cc:f0:e9:d5:b3:8f:a6:98:83:9f:3e:
                    1f:e2:3c:5b:cc:79:e1:2d:2e:c7:55:f0:e1:f0:13:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3A:30:F9:B6:01:8B:36:C3:6A:B3:5E:9A:21:46:60:65:27:79:64
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d415ca9-37f8-42a9-8935-e200e9c8eb3b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d415ca9-37f8-42a9-8935-e200e9c8eb3b/8b3ba417261016b801773caef490c0ccf1c575fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:a9::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270231

    Signature Algorithm: sha256WithRSAEncryption
         74:43:42:7c:ef:d3:33:dc:e0:dc:08:a0:f3:bd:ee:9e:ad:a1:
         2e:7a:d0:29:6a:82:4f:d5:57:db:69:e5:8b:7e:8a:4c:e8:1c:
         b7:b3:1b:dd:bb:4b:5f:ab:01:2e:51:a6:52:52:ef:54:f4:86:
         d5:b8:a8:c4:5b:d9:b9:70:59:68:42:a9:9b:70:f1:2b:fe:88:
         cf:43:cc:87:3b:59:54:ab:2c:60:cf:89:eb:2f:a4:47:a5:45:
         a5:5e:7c:d0:8c:45:af:61:66:be:b6:5c:d4:15:e9:51:f7:c8:
         42:12:7c:84:5d:91:cf:e9:11:1d:fb:33:8a:03:48:ed:de:27:
         9e:46:b0:27:87:d4:38:69:46:47:08:e9:f9:f6:65:ae:ce:77:
         74:ce:41:96:89:18:aa:8e:01:c4:82:b2:58:40:79:4a:be:ee:
         f0:53:11:1a:f5:b2:1d:bf:fd:1a:b0:04:34:3d:a7:77:b3:8c:
         44:fd:86:57:55:c1:8b:87:7c:78:fd:53:c9:19:c8:70:c8:63:
         32:95:b7:43:71:f0:7d:de:8d:b3:02:39:44:93:0d:cc:0d:c0:
         8e:fa:ad:de:5b:e9:13:d1:9a:bc:1c:5a:39:d5:7b:05:28:80:
         8c:5d:b8:b9:85:63:99:52:5f:82:68:d4:1c:4f:7f:0f:8f:d1:
         cc:a7:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----